Bash-Script-CVE-2019-17662

Este repositorio no tiene un README...

CVE-2024-3094-Checker

Comprobador de CVE-2024-3094 El Comprobador de CVE-2024-3094 es un potente script de Bash diseñado para sistemas Linux. Identifica la vulnerabilidad CVE-2024-3094, relacionada con las utilidades XZ/LZMA. Este script es esencial para administradores de sistemas y profesionales de seguridad para...

Fenrir

Fenrir Simple Bash IOC Scanner Fenrir is a simple IOC scanner bash script. It allows scanning Linux/Unix/OSX systems for the following Indicators of Compromise IOCs: Hashes MD5, SHA1 and SHA256 using md5sum, sha1sum, sha -a 256 File Names string - checked for substring of the full path, e.g...

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker Script Bash para comprobar la CVE-2022-0847 "Dirty Pipe" https://dirtypipe.cm4all.com/ Uso Comprobar la versión actual del kernel ./dpipe.sh Comprobar una versión específica del kernel ./dpipe.sh 5.10.11...

sticky_keys_hunter

粘滞键猎人 这是一个用于测试粘滞键和 utilman 后门的 POC bash 脚本。该脚本将连接到 RDP 服务器，发送粘滞键和 utilman 触发命令，并对结果进行截图。 此脚本是为了证明我关于以黑盒方式检测这些后门的理论而编写的，自撰写博客文章 追踪粘滞键后门 以来未再更新。然而，@DennisMald 和 @notmedic 进一步推进了这项研究，并在他们的 DEF CON 24 演讲 粘滞键通往王国之路 中发布了 粘滞键杀手 工具。请查看他们的工具，因为它在许多方面优于这个 POC 脚本。 它是如何工作的？ 1. 使用 rdesktop 连接到 RDP 2. 使用 xdoto...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

Lazymux

Lazymux Lazymux 是一款帮助您在 Android 系统上轻松安装和使用多个渗透测试及黑客工具的工具。它使用户能够轻松安装和使用各种流行工具，如 Nmap、SQLMap 和 Metasploit。该工具使用简单，只需输入一个命令即可安装和使用任何工具。Lazymux 是一个开源项目，是渗透测试和道德黑客任务中非常有用的工具。 用心制作 ❤️ 特性 工具安装 安装单个工具 lzmx setinstall 1 安装多个工具 lzmx setinstall 1 2 3 4 安装全部工具 lzmx setinstall @ 默认安装目录 在 lazymux.conf 中，将符号...

httprobe

httprobe Take a list of domains and probe for working http and https servers. Install ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶ cat recon/example/domains.txt...

CVE-2019-19781

CVE-2019-19781 Exploit de Ejecución Remota de Código para Citrix Application Delivery Controller y Citrix Gateway CVE-2019-19781 Uso : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE ejemplo : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...

Reconky-Automated_Bash_Script

Reconky-Automated Bash Script \ \ /|| \ /|\ /| | || /| /| || \ || \ / / \ / | || | | | | | || \ | || / / \ / | | | | | | | || \ \ || \ / | \ | | | | | | || | \ || \ \ | \ | /| /| || \ || / \ \ | | |/ ///|/ |/ / / Usage ./reconky.sh About Reconky is a script written in bash to automate the...

4nonimizer

If you like the 4nonimizer, please help us with whatever you want! What is 4nonimizer? It is a bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers OpenVPN, whether free or paid. By default, it includes several...

CVE-2025-24893

CVE-2025-24893 Script POC en Bash para la vulnerabilidad de RCE en XWiki Platform Ejemplo de uso: Configurar un listener de netcat: $ nc -nvlp Después ejecutar el script: $ chmod +x cve.sh $ ./cve.sh Versiones afectadas: Desde 5.4 hasta 15.10.11 Desde 16.0.0 hasta 16.4.1 Aviso legal Esta...

CVE-2022-1388

CVE-2022-1388 Verificación y exploit para CVE-2022-1388 Instalación: python3 -m pip install -r requirements.txt Uso Individual : python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' Masivo : python3 cve.py m...

PwnBox-Kali

PwnBox-Kali Script Bash para automatizar el proceso de configurar una nueva máquina virtual Kali Linux para que se parezca a HTB PwnBox Solo un script para automatizar todo el proceso de ajustar e instalar herramientas en una nueva VM de Kali Linux Fue hecho principalmente para mí pero quizás...

ShellShockHunter

ShellShockHunter v1.0 It's a simple tool for test vulnerability shellshock Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock software bug Shellshock, also known as Bashdoor, is a famil...

github-search

github-search A collection of tools to perform searches on GitHub. Install git clone https://github.com/gwen001/github-search cd github-search pip3 install -r requirements.txt Most of the time GitHub requires a token to perform searches. You can create a .tokens file in the cloned repo directory...

Autopwn

Autopwn™ A simple bash based metasploit automation tool! With just a few clicks, own any android or windows device!! Autopwn in action Caution: This tool is purely for educational purposes, If you end up in any legal trouble and point a finger at me, I'll just laugh at you : The user is responsib...

Taken

Taken Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover. What all you can do with Subdomain Takeover - Cookies stealing, If cookies are set with domain attribute set to the hijacked subdomain. CORS request, If Access-Control-Allow-Origin is set to...

testssl.sh

简介 testssl.sh 是一个免费的命令行工具，用于检查服务器上任意端口的服务是否支持 TLS/SSL 密码套件、协议以及一些加密漏洞。 主要特性 清晰的输出：您可以轻松判断结果是好是坏。 机器可读输出（CSV、两种 JSON 格式），同时也支持 HTML 输出。 无需安装或配置。无需 gems、CPAN、pip 等。 开箱即用：Linux、MacOS、FreeBSD、N...

GETROBARB

GETROBARB XSS Scanner 是一个用 Bash 编写的自动化 XSS（跨站脚本攻击）漏洞识别与检测框架，专为授权的 Web 安全审计而设计。它整合了多个 bug bounty 和渗透测试生态中流行的工具，以自动化整个易受攻击端点发现流程。 工具描述：GETROBARB XSS Scanner GETROBARB XSS Scanner 框架是一款自动化 XSS 识别与扫描工具，结合多种进攻性安全工具，用于识别 Web 应用中潜在的跨站脚本（XSS）漏洞。 该框架面向渗透测试人员、安全研究人员和 bug bounty 猎人，允许从单一接口执行完整的子域名发现、URL...